2026

Improper trust boundary enforcement in Kiro IDE before version 0.8.0 on all supported platforms might allow a remote una

In the Linux kernel, the following vulnerability has been resolved: RDMA/umad: Reject negative data_len in ib_umad_writ

In the Linux kernel, the following vulnerability has been resolved: net/sched: act_gate: snapshot parameters with RCU o

In the Linux kernel, the following vulnerability has been resolved: perf/core: Fix refcount bug and potential UAF in pe

The "Privileged Helper" component of the Arturia Software Center (MacOS) does not perform sufficient client code signatu

In the Linux kernel, the following vulnerability has been resolved: media: dvb-core: fix wrong reinitialization of ring

In the Linux kernel, the following vulnerability has been resolved: gve: Fix stats report corruption on queue count cha

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix unprivileged local user can do privil

In the Linux kernel, the following vulnerability has been resolved: net/sched: Only allow act_ct to bind to clsact/ingr

OpenClaw versions 2026.1.21 prior to 2026.2.19 contain a path hijacking vulnerability in tools.exec.safeBins that allows

OpenClaw versions prior to 2026.2.22 on macOS contain a path validation bypass vulnerability in the exec-approval allowl

OpenClaw versions prior to 2026.2.22 contain an arbitrary shell execution vulnerability in shell environment fallback th

OpenWrt Project is a Linux operating system targeting embedded devices. In versions prior to 24.10.6, a vulnerability in

pydicom is a pure Python package for working with DICOM files. Versions 2.0.0-rc.1 through 3.0.1 are vulnerable to Path

In the Linux kernel, the following vulnerability has been resolved: perf: Fix __perf_event_overflow() vs perf_remove_fr

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: unconditionally bump set->nel

In the Linux kernel, the following vulnerability has been resolved: macvlan: observe an RCU grace period in macvlan_com

In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM

In the Linux kernel, the following vulnerability has been resolved: io_uring: ensure ctx->rings is stable for task work

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: always walk all pending catch

PySpector is a static analysis security testing (SAST) Framework engineered for modern Python development workflows. PyS

AWStats 8.0 is vulnerable to Command Injection via the open function

libfuse is the reference implementation of the Linux FUSE. From version 3.18.0 to before version 3.18.2, a use-after-fre

ScreenToGif is a screen recording tool. In versions from 2.42.1 and prior, ScreenToGif is vulnerable to DLL sideloading

Requires malware code to misuse the DDK kernel module IOCTL interface. Such code can use the interface in an unsupporte

Admin Express 1.2.5.485 contains a local structured exception handling buffer overflow vulnerability that allows local a

The Intel EPT paging code uses an optimization to defer flushing of any cached EPT state until the p2m lock is dropped,

llama.cpp is an inference of several LLM models in C/C++. Prior to b7824, an integer overflow vulnerability in the `ggml

Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in linkingvision rapidvms.This iss

Out-of-bounds Write vulnerability in WujekFoliarz DualSenseY-v2.This issue affects DualSenseY-v2: before 54.

Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in joncampbell123 doslib.This issu

Out-of-bounds Write vulnerability in MolotovCherry Android-ImageMagick7.This issue affects Android-ImageMagick7: before

The 32-bit implementation of NGINX Open Source has a vulnerability in the ngx_http_mp4_module module, which might allow

NGINX Open Source and NGINX Plus have a vulnerability in the ngx_http_mp4_module module, which might allow an attacker t

A flaw was found in the libtiff library. A remote attacker could exploit a signed integer overflow vulnerability in the

In versions before 7.0.0.64, IDrive’s id_service.exe process runs with elevated privileges and regularly reads from seve

sbt is a build tool for Scala, Java, and others. From version 0.9.5 to before version 1.12.7, on Windows, sbt uses Proce

NVIDIA Megatron LM contains a vulnerability in quantization configuration loading, which could allow remote code executi

NVIDIA Megatron-LM contains a vulnerability in the hybrid conversion script where an Attacker may cause an RCE by convin

NVIDIA Model Optimizer for Windows and Linux contains a vulnerability in the ONNX quantization feature, where a user cou

NVIDIA Megatron-LM contains a vulnerability in checkpoint loading where an Attacker may cause an RCE by convincing a use

NVIDIA Megatron-LM contains a vulnerability in inferencing where an Attacker may cause an RCE by convincing a user to lo

NVIDIA Megatron-LM contains a vulnerability in checkpoint loading where an Attacker may cause an RCE by convincing a use

NVIDIA NeMo Framework contains a vulnerability in checkpoint loading where an attacker could cause remote code execution

NVIDIA NeMo Framework contains a vulnerability where an attacker may cause remote code execution. A successful exploit o

The issue was addressed with improved memory handling. This issue is fixed in iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4

The installer for OM Workspace (Windows Edition) Ver 2.4 and earlier insecurely loads Dynamic Link Libraries (DLLs), whi

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Prevent ubuf size overflow The ubuf

In the Linux kernel, the following vulnerability has been resolved: wifi: libertas: fix use-after-free in lbs_free_adap

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix out-of-bounds memset in command